PermissionEvaluationRequest Input Object
Input to evaluate a list of permissions available for a user. The less permissions are to be checked - the better will be a response time. API Services are encouraged to either do a check for a single permission or calculate a permission for a single operation.
Fields
#
target
Scope of evaluation in format of glob pattern.
To calculate all permissions for all resources, specify ** .
To calculate all permissions on a single resource, specify {resource}:** , e.g. urn:cx/users:data/roles:** .
To calculate a permission for a single operation on a resource, specify {resource}:{operation}:* , e.g. urn:cx/users:data/roles:read:* .
To check a single permission, specify {resource}:{operation}:{level} , e.g. urn:cx/users:data/roles:read:all .
Specifying any other pattern will result in 400 Bad Request, as well as specifying a non-existing resource, operation or permission level.
Usages
#
References
#
- Argument request of field permissionsEvaluate from type Query
PatchStrategy